Assessing security defenses and testing for weakness is an essential feedback component of the continuous improvement cycle - canonized by several risk management frameworks. At RiPPUL, we look at Vulnerability Testing as an important component of a well managed risk management program.